CVE-2002-0289

CVE-2002-0289 Phusion WebServer 1.0 - Overflow del buffer remoto 'URL' Pubblicazione su Exploit-db: https://www.exploit-db.com/exploits/21294/ Phusion WebServer 1.0 - Denial of Service tramite URL lungo Pubblicazione su Exploit-db: https://www.exploit-db.com/exploits/21293/ Autore Alex Hernandez...

CVE-2025-9090

CVE-2025-9090 लेखक: Byte Reaper विवरण यह एक्सप्लॉइट CVE-2025-9090 को लक्षित करता है, जो Tenda AC20 v16.03.08.12 राउटर में एक कमांड इंजेक्शन भेद्यता है। दोष एंडपॉइंट /goform/telnet में है, जिसे दूरस्थ रूप से ट्रिगर किया जा सकता है। जब एक्सेस किया जाता है, तो यह डिवाइस पर Telnet सेवा शुरू करता है,...

CVE-2025-8971

CVE-2025-8971 SQL Injection Autore: Byte Reaper Descrizione : Questo exploit per CVE-2025-8971, una vulnerabilità di SQL injection in itsourcecode Online Tour and Travel Management System 1.0. La vulnerabilità risiede in /admin/operations/travellers.php e può essere sfruttata da remoto tramite il...

CVE-2021-40904

CVE-2021-40904 - RCE über die in CheckMk eingebettete Dokuwiki-Anwendung Anwendung: CheckMK Management Web Console Softwareversion: Von 1.5.0 bis 1.5.0p25 Angriffstyp: RCE Lösung: Aktualisieren Sie auf Version 1.6 oder höher. Zusammenfassung: Die Web-Management-Konsole von CheckMk Raw Edition...

CVE-2025-8191

CVE-2025-8191 – حقن XSS في Swagger UI الوصف : يحتوي هذا المستودع على إثبات مفهوم PoC لاستغلال الثغرة CVE‑2025‑8191، وهي ثغرة وجدت في Swagger UI. تسمح الثغرة بحقن Cross‑Site Scripting XSS في حقل “description”، مما يؤدي إلى تنفيذ سكربت عن بعد في إصدارات Swagger UI ≤ 1.0.3. المراجع : مدخل NVD:...

EUVD-2026-65291

The OCPP 1.6 client in subsys/net/lib/ocpp/ocppj.c contains a stack buffer overflow in parsegetconfigmsg. When handling a GetConfiguration request from the central system, the handler copied the attacker-controlled JSON "key" string into the caller's fixed 50-byte stack buffer skeyCISTR50, declar...

CVE-2026-13214

A stack buffer overflow in the Zephyr RTOS OCPP 1.6 client (subsys/net/lib/ocpp/ocpp_j.c, function parse_getconfig_msg()) results from an unbounded strcpy() of an attacker-controlled JSON "key" string into a fixed 50-byte stack buffer (skey[CISTR50]). The key is parsed from a GetConfiguration mes...

CVE-2026-13214 Stack buffer overflow in OCPP GetConfiguration key parsing

The OCPP 1.6 client in subsys/net/lib/ocpp/ocppj.c contains a stack buffer overflow in parsegetconfigmsg. When handling a GetConfiguration request from the central system, the handler copied the attacker-controlled JSON "key" string into the caller's fixed 50-byte stack buffer skeyCISTR50, declar...

CVE-2025-7769

CVE-2025-7769 – Injeção Remota de Comandos no mobileapi Descrição : Este repositório contém um exploit de Prova‑de‑Conceito PoC para CVE‑2025‑7769 , uma vulnerabilidade crítica de Injeção Remota de Comandos encontrada em dispositivos Tigo Energy CCA que expõem o endpoint /cgi-bin/mobileapi. A...

CVE-2025-24893-POC

CVE-2025-24893 Installa bun: root@kitploit: curl -fsSL https://bun.com/install | bash Per installare le dipendenze: root@kitploit: bun install Per eseguire: root@kitploit: bun run CVE-2025-24893.ts Questo progetto è stato creato utilizzando bun init in bun v1.2.19. Bun è un runtime JavaScript...

CVE-2025-54769

CVE-2025-54769 – LPAR2RRD RCE Beschreibung : Dieses Repository enthält einen Proof-of-Concept PoC-Exploit für CVE-2025-54769, eine Schwachstelle in lpar2rrd. Die Schwachstelle ermöglicht Remote-Code-Ausführung RCE und Directory Traversal durch Missbrauch des Endpunkts /lpar2rrd-cgi/upgrade.sh. De...

BackDoorSim

BackdoorSim Panoramica BackdoorSim è uno strumento di amministrazione e monitoraggio remoto progettato per scopi educativi e di test. È composto da due componenti principali: ControlServer e BackdoorClient. Il server controlla il client, consentendo varie operazioni come trasferimento file,...

CVE-2023-4220-RCE

CVE-2023-4220-RCE Sommario Avviso di Starlabs Prodotto interessato: Chamilo , -p --port REMOTE PORT -c --comand Flag per la reverse shell -lh/--localhost: IP dell'attaccante -lp/--localtcat porta listener...

LogMePwn

LogMePwn LogMePwn è un toolkit completamente automatizzato, multi-protocollo, affidabile e super veloce per la scansione e la validazione della vulnerabilità Log4J RCE CVE-2021-44228. Punti di forza dello strumento Supporto nativo per la generazione automatica di Canary Tokens tramite email o...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 AGGIORNAMENTO: Oracle ha appena divulgato una nuova vulnerabilità CVE-2025-61884, lo script di rilevamento per tale vulnerabilità può essere trovato in questo repository o originalmente qui:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. Come cita...

CVE-2025-55182-VulnCheckPOC

PoC di verifica della vulnerabilità CVE-2025-55182 Scanner proof-of-concept per rilevare la vulnerabilità React Server Components RSC nelle applicazioni Next.js CVE-2025-55182. Utilizzo Questo è solo un controllo per verificare se un server è vulnerabile, basato su questa pubblicazione di...

go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset

CVE-2026-67822 — Tenda W6-S wifiSSIDset-Stack-Pufferüberlauf PoC Begleit-PoC zum Hunt-Benito-Artikel "GO Without Bounds: CVE-2026-67822 — Stack-Pufferüberlauf imwifiSSIDset-Formularhandler des Tenda W6-S". CVE-2026-67822 CVSS 9.8 Kritisch, CWE-121 ist ein stack-basierter Pufferüberlauf in...

poc-CVE-2026-64638-

XSS2Shell — CVE-2026-64638 PoC WordPress Pre-Auth-XSS → RCE-Exploit-Kette, basierend auf Forschung von pwn.ai, veröffentlicht auf ionsec.io. ⚠️ RECHTLICHER HINWEIS : Nur für BILDUNGSZWECKE und AUTORISIERTE TESTS. Verwenden Sie es nur gegen Systeme, die Ihnen gehören oder für die Sie eine...

cve-2019-17558-apache-solr-rce

Apache Solr RCE CVE-2019-17558 - CTF Write-up Exploração prática de uma vulnerabilidade de Velocity Template Injection no Apache Solr, evoluindo de uma falha em ferramenta automatizada Metasploit para uma exploração manual bem-sucedida. Este write-up documenta o raciocínio completo do exercício,...

CVE-2026-13714

Realtyna WPL 5.3.0 - Nicht authentifizierter RCE-Exploit Beschreibung Dieser Exploit zielt auf eine kritische Schwachstelle in den Versionen vor 5.3.0 des Plugins Realtyna Organic IDX + WPL Real Estate ab. Das Plugin verwendet fest verdrahtete Zugangsdaten und erlaubt nicht authentifizierte...